Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ec02ae6-e3c1-38fb-8b79-fd5aff4538a5.roa
File: 3ec02ae6-e3c1-38fb-8b79-fd5aff4538a5.roa (raw, json)
Hash identifier: kkyA3zSptYokrhO+3IcWqKy6YbIxjfqEMyCd/HBoWZo=
Subject key identifier: 89:46:2E:CA:D2:58:16:AF:51:43:61:95:B9:30:DD:EE:4A:38:48:D7
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F432858440D457BC7C24CEBAC80986A80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ec02ae6-e3c1-38fb-8b79-fd5aff4538a5.roa
Signing time: Wed 29 Nov 2023 19:04:39 +0000
ROA not before: Wed 29 Nov 2023 19:04:39 +0000
ROA not after: Tue 27 Feb 2024 19:04:39 +0000
asID: 834
IP address blocks: 23.26.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:0d:45:7b:c7:c2:4c:eb:ac:80:98:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 29 19:04:39 2023 GMT
Not After : Feb 27 19:04:39 2024 GMT
Subject: CN=6a26544d-0814-46a0-acd6-7ee6a9b0a576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c7:b1:6a:22:1c:d0:95:29:f7:34:8f:fb:4a:
5a:85:ef:91:52:00:ff:aa:2d:0e:50:41:50:11:6e:
c7:10:59:dc:94:3f:37:41:7c:4e:2c:50:7d:83:a1:
96:6b:4b:44:17:33:27:98:fe:63:b1:e3:8f:6d:48:
f6:a7:47:69:35:f2:99:f0:8f:96:28:8d:13:a0:a8:
f8:a7:f1:c6:74:b4:df:d3:58:12:fb:36:0d:be:c9:
39:b6:83:f3:cd:12:66:c6:7d:b7:b9:d3:a3:47:e6:
29:32:9e:f5:7c:3e:8c:69:f5:64:a7:0d:59:59:61:
83:dc:fd:fe:83:de:54:2c:4b:e7:4f:da:14:b7:eb:
22:e6:e2:94:b6:71:c2:bb:b6:1c:13:ec:ab:58:5d:
07:a7:73:44:25:94:fb:b2:1a:9a:2f:47:bb:99:96:
ab:d3:04:c9:b1:5f:3d:04:62:14:01:1b:d6:bf:bd:
b6:76:b4:5f:b6:6a:ae:77:2c:a3:db:19:0e:be:eb:
64:f6:bb:fe:43:43:13:2d:6c:6f:7a:90:4a:22:13:
68:00:d7:19:14:71:44:41:dc:a4:16:c4:96:63:df:
7a:fb:4a:d0:35:d6:d4:df:8b:7b:3f:a2:49:fc:3c:
a6:71:2f:6d:ee:86:e1:c7:b7:e9:d3:04:3b:c6:04:
4d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:46:2E:CA:D2:58:16:AF:51:43:61:95:B9:30:DD:EE:4A:38:48:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3ec02ae6-e3c1-38fb-8b79-fd5aff4538a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:f4:c5:35:b5:39:18:31:ed:3f:08:d9:84:54:80:c1:fc:37:
a8:76:f5:31:a7:75:0c:a9:ec:d6:bb:a4:35:61:63:be:08:dd:
b8:b9:f1:a8:4b:7a:c1:46:53:fa:d1:09:fe:ea:3a:67:8e:ef:
f3:9c:1e:7a:07:ad:44:66:94:76:b8:4e:67:bc:38:7b:45:d0:
f2:20:b7:a4:dc:df:5f:b9:09:b3:ba:d8:dc:ae:c0:8c:cf:46:
e8:d3:82:ee:42:13:79:40:5c:98:f5:4f:0c:e8:f5:d9:7d:98:
2d:d8:28:50:d0:7d:94:92:ac:65:20:ca:78:3a:d4:f1:cc:c2:
f9:ef:12:73:c8:ac:be:61:46:50:d9:be:00:b6:42:05:91:9e:
a1:48:47:71:7d:84:c7:b9:1c:d1:ed:8f:9b:33:b8:7b:a7:c3:
0d:7c:a2:01:77:e9:13:22:db:5b:88:88:82:7e:99:14:02:e1:
44:14:01:06:d7:63:54:34:6a:1c:b6:96:5d:bc:ba:6b:6a:9e:
13:10:33:dd:00:b0:b8:2c:44:f2:6d:21:5f:41:8a:72:75:db:
be:bb:73:4b:97:a4:a9:1e:5d:9d:9f:d8:6e:ec:d8:27:07:39:
51:f4:6f:af:ed:26:9b:fb:c5:4f:7d:51:ef:98:ae:b9:f0:04:
2b:d8:9e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 2 19:30:33 2023 by rpki-client on console-fra.rpki-client.org